Multiple bugs in OpenWeave and Nest Labs Nest Cam IQ indoor camera

guest · Aug 19, 2019

Multiple bugs in OpenWeave and Nest Labs Nest Cam IQ indoor camera
August 19,2019
https://blog.talosintelligence.com/2019/08/vuln-spotlight-nest-camera-openweave-aug-2019.html?

Cisco Talos recently discovered multiple vulnerabilities in the Nest Cam IQ Indoor camera. One of Nest Labs’ most advanced internet-of-things devices, the Nest Cam IQ Indoor integrates Security-Enhanced Linux in Android, Google Assistant, and even facial recognition all into a compact security camera.

It primarily uses the Weave protocol for setup and initial communications with other Nest devices over TCP, UDP, Bluetooth and 6lowpan.
It is important to note that while the weave-tool binary also lives on the camera and is vulnerable, it is not normally exploitable as it requires a local attack vector (i.e. an attacker-controlled file) and the vulnerable commands are never directly run by the camera.

In accordance with our coordinated disclosure policy, Cisco Talos worked with Weave and Nest Labs to ensure that these issues are resolved and that an update is available for affected customers.
Vulnerability details [...]
Click to expand...

Log in or Sign up

Multiple bugs in OpenWeave and Nest Labs Nest Cam IQ indoor camera

guest Guest

Log in or Sign up

Multiple bugs in OpenWeave and Nest Labs Nest Cam IQ indoor camera

guest Guest

Useful Searches